From deb0dde01f50f57ff6e219ed264c6391ff0c851f Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 12 Aug 2026 00:43:59 +0000 Subject: [PATCH 01/10] chore(deps): update registry.access.redhat.com/ubi9/ubi docker tag to v9.8-1786416589 (#524) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- images/openvox-agent/Containerfile | 2 +- images/openvox-db/Containerfile | 2 +- images/openvox-e2e-code/Containerfile | 2 +- images/openvox-server-reference/Containerfile | 2 +- images/openvox-server/Containerfile | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/images/openvox-agent/Containerfile b/images/openvox-agent/Containerfile index 35962a08..cff45028 100644 --- a/images/openvox-agent/Containerfile +++ b/images/openvox-agent/Containerfile @@ -13,7 +13,7 @@ ARG OPENVOX_AGENT_VERSION=8.28.1 # OPENVOX_MAJOR selects the release repo (openvox${OPENVOX_MAJOR}-release-el-9). ARG OPENVOX_MAJOR=8 -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177 +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 ARG OPENVOX_AGENT_VERSION ARG OPENVOX_MAJOR diff --git a/images/openvox-db/Containerfile b/images/openvox-db/Containerfile index 4c3197dc..b24df91b 100644 --- a/images/openvox-db/Containerfile +++ b/images/openvox-db/Containerfile @@ -16,7 +16,7 @@ ARG OPENVOXDB_VERSION=8.15.0 ################################################################################ # Stage: base — JRE + minimal runtime deps ################################################################################ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177 AS base +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 AS base ARG JDK_VERSION=21 diff --git a/images/openvox-e2e-code/Containerfile b/images/openvox-e2e-code/Containerfile index 18f5e651..83132d52 100644 --- a/images/openvox-e2e-code/Containerfile +++ b/images/openvox-e2e-code/Containerfile @@ -8,7 +8,7 @@ # podman build -t openvox-e2e-code:latest -f images/openvox-e2e-code/Containerfile . # Stage 1: Install modules with r10k -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177 AS builder +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 AS builder RUN dnf module enable ruby:3.3 -y \ && dnf install -y --setopt=install_weak_deps=False ruby ruby-devel rubygem-bundler git gcc make redhat-rpm-config libffi-devel \ diff --git a/images/openvox-server-reference/Containerfile b/images/openvox-server-reference/Containerfile index ab6b75f2..c62af78d 100644 --- a/images/openvox-server-reference/Containerfile +++ b/images/openvox-server-reference/Containerfile @@ -4,7 +4,7 @@ # Build: # podman build -t openvox-server-reference:latest images/openvox-server-reference/ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177 +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 RUN rpm -Uvh https://yum.voxpupuli.org/openvox8-release-el-9.noarch.rpm \ && dnf install -y --setopt=install_weak_deps=False openvox-server \ diff --git a/images/openvox-server/Containerfile b/images/openvox-server/Containerfile index 95bdc6d0..6384f101 100644 --- a/images/openvox-server/Containerfile +++ b/images/openvox-server/Containerfile @@ -17,7 +17,7 @@ ARG OPENVOX_VERSION=8.28.1 ################################################################################ # Stage: base — JRE + minimal runtime deps (no Ruby) ################################################################################ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177 AS base +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 AS base ARG JDK_VERSION=21 From 0cdf93fc3d88f95c8cbd605defff919e62fa6649 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 12 Aug 2026 10:32:09 +0000 Subject: [PATCH 02/10] chore(deps): update dependency conforma/cli to v0.9.103 (#525) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/_conforma-validate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/_conforma-validate.yaml b/.github/workflows/_conforma-validate.yaml index 870d717d..2839a801 100644 --- a/.github/workflows/_conforma-validate.yaml +++ b/.github/workflows/_conforma-validate.yaml @@ -27,7 +27,7 @@ jobs: packages: read env: # renovate: datasource=github-releases depName=conforma/cli - EC_VERSION: "0.9.102" + EC_VERSION: "0.9.103" steps: - name: Checkout uses: actions/checkout@v7 From a3ccb3d4241a42c49a09378eab9a80ce3016bfba Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 12 Aug 2026 22:36:43 +0000 Subject: [PATCH 03/10] chore(deps): update dependency conforma/cli to v0.9.105 (#527) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/_conforma-validate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/_conforma-validate.yaml b/.github/workflows/_conforma-validate.yaml index 2839a801..7cf54a68 100644 --- a/.github/workflows/_conforma-validate.yaml +++ b/.github/workflows/_conforma-validate.yaml @@ -27,7 +27,7 @@ jobs: packages: read env: # renovate: datasource=github-releases depName=conforma/cli - EC_VERSION: "0.9.103" + EC_VERSION: "0.9.105" steps: - name: Checkout uses: actions/checkout@v7 From 8832a422d989969f00304e53d42807e101b41eb3 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 14 Aug 2026 00:03:25 +0000 Subject: [PATCH 04/10] chore(deps): update container base images --- images/openvox-agent/Containerfile | 2 +- images/openvox-db/Containerfile | 2 +- images/openvox-e2e-code/Containerfile | 2 +- images/openvox-mock/Containerfile | 2 +- images/openvox-operator/Containerfile | 2 +- images/openvox-server-reference/Containerfile | 2 +- images/openvox-server/Containerfile | 8 ++++---- 7 files changed, 10 insertions(+), 10 deletions(-) diff --git a/images/openvox-agent/Containerfile b/images/openvox-agent/Containerfile index cff45028..d79082d4 100644 --- a/images/openvox-agent/Containerfile +++ b/images/openvox-agent/Containerfile @@ -13,7 +13,7 @@ ARG OPENVOX_AGENT_VERSION=8.28.1 # OPENVOX_MAJOR selects the release repo (openvox${OPENVOX_MAJOR}-release-el-9). ARG OPENVOX_MAJOR=8 -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 ARG OPENVOX_AGENT_VERSION ARG OPENVOX_MAJOR diff --git a/images/openvox-db/Containerfile b/images/openvox-db/Containerfile index b24df91b..457f2a6a 100644 --- a/images/openvox-db/Containerfile +++ b/images/openvox-db/Containerfile @@ -16,7 +16,7 @@ ARG OPENVOXDB_VERSION=8.15.0 ################################################################################ # Stage: base — JRE + minimal runtime deps ################################################################################ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 AS base +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 AS base ARG JDK_VERSION=21 diff --git a/images/openvox-e2e-code/Containerfile b/images/openvox-e2e-code/Containerfile index 83132d52..456355f1 100644 --- a/images/openvox-e2e-code/Containerfile +++ b/images/openvox-e2e-code/Containerfile @@ -8,7 +8,7 @@ # podman build -t openvox-e2e-code:latest -f images/openvox-e2e-code/Containerfile . # Stage 1: Install modules with r10k -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 AS builder +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 AS builder RUN dnf module enable ruby:3.3 -y \ && dnf install -y --setopt=install_weak_deps=False ruby ruby-devel rubygem-bundler git gcc make redhat-rpm-config libffi-devel \ diff --git a/images/openvox-mock/Containerfile b/images/openvox-mock/Containerfile index 50eb9853..6afdc185 100644 --- a/images/openvox-mock/Containerfile +++ b/images/openvox-mock/Containerfile @@ -3,7 +3,7 @@ # Build (from repo root): # podman build -t openvox-mock:latest -f images/openvox-mock/Containerfile . -FROM docker.io/library/golang:1.26.5 AS builder +FROM docker.io/library/golang:1.26.6 AS builder WORKDIR /src COPY go.mod go.sum ./ diff --git a/images/openvox-operator/Containerfile b/images/openvox-operator/Containerfile index 6c6d8d25..c76ca7ac 100644 --- a/images/openvox-operator/Containerfile +++ b/images/openvox-operator/Containerfile @@ -1,4 +1,4 @@ -FROM docker.io/library/golang:1.26.5 AS builder +FROM docker.io/library/golang:1.26.6 AS builder WORKDIR /workspace COPY go.mod go.sum ./ diff --git a/images/openvox-server-reference/Containerfile b/images/openvox-server-reference/Containerfile index c62af78d..caec8e0f 100644 --- a/images/openvox-server-reference/Containerfile +++ b/images/openvox-server-reference/Containerfile @@ -4,7 +4,7 @@ # Build: # podman build -t openvox-server-reference:latest images/openvox-server-reference/ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 RUN rpm -Uvh https://yum.voxpupuli.org/openvox8-release-el-9.noarch.rpm \ && dnf install -y --setopt=install_weak_deps=False openvox-server \ diff --git a/images/openvox-server/Containerfile b/images/openvox-server/Containerfile index 6384f101..12035524 100644 --- a/images/openvox-server/Containerfile +++ b/images/openvox-server/Containerfile @@ -17,7 +17,7 @@ ARG OPENVOX_VERSION=8.28.1 ################################################################################ # Stage: base — JRE + minimal runtime deps (no Ruby) ################################################################################ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786416589 AS base +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 AS base ARG JDK_VERSION=21 @@ -160,7 +160,7 @@ RUN find / -path '*/openvoxserver-ca-*/lib/puppetserver/ca/action/setup.rb' \ ################################################################################ # Stage: autosign — compile the openvox-autosign Go binary ################################################################################ -FROM docker.io/library/golang:1.26.5 AS autosign +FROM docker.io/library/golang:1.26.6 AS autosign WORKDIR /src COPY go.mod go.sum ./ @@ -173,7 +173,7 @@ RUN CGO_ENABLED=0 go build -o /openvox-autosign ./cmd/autosign/ ################################################################################ # Stage: enc — compile the openvox-enc Go binary ################################################################################ -FROM docker.io/library/golang:1.26.5 AS enc +FROM docker.io/library/golang:1.26.6 AS enc WORKDIR /src COPY go.mod go.sum ./ @@ -185,7 +185,7 @@ RUN CGO_ENABLED=0 go build -o /openvox-enc ./cmd/enc/ ################################################################################ # Stage: report — compile the openvox-report Go binary ################################################################################ -FROM docker.io/library/golang:1.26.5 AS report +FROM docker.io/library/golang:1.26.6 AS report WORKDIR /src COPY go.mod go.sum ./ From af6ebe7f15001cf32dc92289be676ab5c9e3d1ed Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 14 Aug 2026 00:04:12 +0000 Subject: [PATCH 05/10] chore(deps): update go dependencies --- go.mod | 14 +++++++------- go.sum | 24 ++++++++++++------------ 2 files changed, 19 insertions(+), 19 deletions(-) diff --git a/go.mod b/go.mod index 0acb96fa..542766b6 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/slauger/openvox-operator go 1.26.4 -toolchain go1.26.5 +toolchain go1.26.6 require ( github.com/prometheus/client_golang v1.24.1 @@ -66,17 +66,17 @@ require ( go.uber.org/zap v1.27.1 // indirect go.yaml.in/yaml/v2 v2.4.4 // indirect go.yaml.in/yaml/v3 v3.0.4 // indirect - golang.org/x/mod v0.38.0 // indirect - golang.org/x/net v0.57.0 // indirect + golang.org/x/mod v0.39.0 // indirect + golang.org/x/net v0.58.0 // indirect golang.org/x/oauth2 v0.36.0 // indirect golang.org/x/sync v0.22.0 // indirect golang.org/x/sys v0.47.0 // indirect - golang.org/x/telemetry v0.0.0-20260708182218-49f421fb7959 // indirect + golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5 // indirect golang.org/x/term v0.45.0 // indirect - golang.org/x/text v0.40.0 // indirect + golang.org/x/text v0.41.0 // indirect golang.org/x/time v0.15.0 // indirect - golang.org/x/tools v0.48.0 // indirect - golang.org/x/vuln v1.6.0 // indirect + golang.org/x/tools v0.49.0 // indirect + golang.org/x/vuln v1.7.0 // indirect gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 // indirect google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect diff --git a/go.sum b/go.sum index 6ef577a3..335ee015 100644 --- a/go.sum +++ b/go.sum @@ -190,10 +190,10 @@ go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc= go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93 h1:fQsdNF2N+/YewlRZiricy4P1iimyPKZ/xwniHj8Q2a0= golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93/go.mod h1:EPRbTFwzwjXj9NpYyyrvenVh9Y+GFeEvMNh7Xuz7xgU= -golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk= -golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40= -golang.org/x/net v0.57.0 h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE= -golang.org/x/net v0.57.0/go.mod h1:KpXc8iv+r3XplLAG/f7Jsf9RPszJzdR0f58q9vGOuEU= +golang.org/x/mod v0.39.0 h1:UF5zwQdCRRUpHfyPwr7d4UrGiVeldIsogtzWVnczL74= +golang.org/x/mod v0.39.0/go.mod h1:bvIbwjQ0HUFFf5AKukeeYQG4ZBUG9yxQbR9aEweIwYY= +golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= +golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs= golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q= golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek= @@ -201,22 +201,22 @@ golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= -golang.org/x/telemetry v0.0.0-20260708182218-49f421fb7959 h1:RJhm5l6Fo4rmEIcndxDllNhhf/fAx8qIm4t6A7vpm2A= -golang.org/x/telemetry v0.0.0-20260708182218-49f421fb7959/go.mod h1:LV7u5Oco+Z/g6XI7PqN+EUUUGGkEcmB1uj2ceI0fOVg= +golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5 h1:ZUSxONxc981v7AW7QUg+I9WwZzSTTJ019ENBYr5pV/Q= +golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5/go.mod h1:LVehoXe41cL5SCVQilsV7Gg6BNG+Js6P9PhSbYTIUkQ= golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0= golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w= -golang.org/x/text v0.40.0 h1:Ub2Z6/xjgF1WrYQz2nuITOEegKFtiIy+rieRJ5lHZKs= -golang.org/x/text v0.40.0/go.mod h1:hpnzDAfGV753zIKo+wk3u1bVKCGPbrnF7+7LBF/UHVY= +golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= +golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M= golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U= golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno= -golang.org/x/tools v0.48.0 h1:3+hClM1aLL5mjMKm5ovokw9epgRXPuu2tILgismM6RE= -golang.org/x/tools v0.48.0/go.mod h1:08xX0orndb/F7jJxGDicx061tyd5pcMto75YMAXr6lk= +golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI= +golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo= golang.org/x/tools/go/expect v0.1.1-deprecated h1:jpBZDwmgPhXsKZC6WhL20P4b/wmnpsEAGHaNy0n/rJM= golang.org/x/tools/go/expect v0.1.1-deprecated/go.mod h1:eihoPOH+FgIqa3FpoTwguz/bVUSGBlGQU67vpBeOrBY= golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated h1:1h2MnaIAIXISqTFKdENegdpAgUXz6NrPEsbIeWaBRvM= golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated/go.mod h1:RVAQXBGNv1ib0J382/DPCRS/BPnsGebyM1Gj5VSDpG8= -golang.org/x/vuln v1.6.0 h1:FeMO9Rm/HwyduOztbvKcOw+zvDEPr4I4aQNSfevFcKY= -golang.org/x/vuln v1.6.0/go.mod h1:bWlG2493/sjR7ksvicBgMrznH3eYQEyK8ifUYBrqUbg= +golang.org/x/vuln v1.7.0 h1:4MQBuhmXbz2uepNJrf3v+aaZLGDqw1JluwYboegA1qg= +golang.org/x/vuln v1.7.0/go.mod h1:Xw7zvU3e1bsCYYBXu+w4wcn2Kgn27f34WBCTw8LL5Us= gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0= gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY= google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 h1:merA0rdPeUV3YIIfHHcH4qBkiQAc1nfCKSI7lB4cV2M= From 27c9c4f05e8607b43a19849d68ab4bf845393da4 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 14 Aug 2026 21:56:06 +0000 Subject: [PATCH 06/10] chore(deps): update dependency conforma/cli to v0.9.108 --- .github/workflows/_conforma-validate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/_conforma-validate.yaml b/.github/workflows/_conforma-validate.yaml index 7cf54a68..60b38b5b 100644 --- a/.github/workflows/_conforma-validate.yaml +++ b/.github/workflows/_conforma-validate.yaml @@ -27,7 +27,7 @@ jobs: packages: read env: # renovate: datasource=github-releases depName=conforma/cli - EC_VERSION: "0.9.105" + EC_VERSION: "0.9.108" steps: - name: Checkout uses: actions/checkout@v7 From 2ab981de5df2b0cb8c36d52e06814826899887a7 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 17 Aug 2026 14:49:35 +0000 Subject: [PATCH 07/10] chore(deps): update container base images (#532) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- images/openvox-agent/Containerfile | 2 +- images/openvox-db/Containerfile | 2 +- images/openvox-e2e-code/Containerfile | 2 +- images/openvox-mock/Containerfile | 2 +- images/openvox-operator/Containerfile | 2 +- images/openvox-server-reference/Containerfile | 2 +- images/openvox-server/Containerfile | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/images/openvox-agent/Containerfile b/images/openvox-agent/Containerfile index d79082d4..c09e3f37 100644 --- a/images/openvox-agent/Containerfile +++ b/images/openvox-agent/Containerfile @@ -13,7 +13,7 @@ ARG OPENVOX_AGENT_VERSION=8.28.1 # OPENVOX_MAJOR selects the release repo (openvox${OPENVOX_MAJOR}-release-el-9). ARG OPENVOX_MAJOR=8 -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 ARG OPENVOX_AGENT_VERSION ARG OPENVOX_MAJOR diff --git a/images/openvox-db/Containerfile b/images/openvox-db/Containerfile index 457f2a6a..f6a13a22 100644 --- a/images/openvox-db/Containerfile +++ b/images/openvox-db/Containerfile @@ -16,7 +16,7 @@ ARG OPENVOXDB_VERSION=8.15.0 ################################################################################ # Stage: base — JRE + minimal runtime deps ################################################################################ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 AS base +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 AS base ARG JDK_VERSION=21 diff --git a/images/openvox-e2e-code/Containerfile b/images/openvox-e2e-code/Containerfile index 456355f1..d38e6345 100644 --- a/images/openvox-e2e-code/Containerfile +++ b/images/openvox-e2e-code/Containerfile @@ -8,7 +8,7 @@ # podman build -t openvox-e2e-code:latest -f images/openvox-e2e-code/Containerfile . # Stage 1: Install modules with r10k -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 AS builder +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 AS builder RUN dnf module enable ruby:3.3 -y \ && dnf install -y --setopt=install_weak_deps=False ruby ruby-devel rubygem-bundler git gcc make redhat-rpm-config libffi-devel \ diff --git a/images/openvox-mock/Containerfile b/images/openvox-mock/Containerfile index 6afdc185..a63b178f 100644 --- a/images/openvox-mock/Containerfile +++ b/images/openvox-mock/Containerfile @@ -11,7 +11,7 @@ RUN go mod download COPY cmd/mock/ cmd/mock/ RUN CGO_ENABLED=0 go build -o /openvox-mock ./cmd/mock/ -FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786380870 +FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786927599 LABEL org.opencontainers.image.title="OpenVox Mock" \ org.opencontainers.image.description="Mock ENC/Report/OpenVox DB receiver for E2E tests" \ diff --git a/images/openvox-operator/Containerfile b/images/openvox-operator/Containerfile index c76ca7ac..861491f2 100644 --- a/images/openvox-operator/Containerfile +++ b/images/openvox-operator/Containerfile @@ -9,7 +9,7 @@ COPY internal/ internal/ ARG TARGETARCH RUN CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} go build -a -o manager ./cmd/main.go -FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786380870 +FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786927599 LABEL org.opencontainers.image.title="OpenVox Operator" \ org.opencontainers.image.description="OpenVox Operator for Kubernetes/OpenShift" \ diff --git a/images/openvox-server-reference/Containerfile b/images/openvox-server-reference/Containerfile index caec8e0f..5c6a4b4c 100644 --- a/images/openvox-server-reference/Containerfile +++ b/images/openvox-server-reference/Containerfile @@ -4,7 +4,7 @@ # Build: # podman build -t openvox-server-reference:latest images/openvox-server-reference/ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 RUN rpm -Uvh https://yum.voxpupuli.org/openvox8-release-el-9.noarch.rpm \ && dnf install -y --setopt=install_weak_deps=False openvox-server \ diff --git a/images/openvox-server/Containerfile b/images/openvox-server/Containerfile index 12035524..5a807c20 100644 --- a/images/openvox-server/Containerfile +++ b/images/openvox-server/Containerfile @@ -17,7 +17,7 @@ ARG OPENVOX_VERSION=8.28.1 ################################################################################ # Stage: base — JRE + minimal runtime deps (no Ruby) ################################################################################ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786631889 AS base +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 AS base ARG JDK_VERSION=21 From d0f60a3175bf37eb4d8c7617c9048e257e33580b Mon Sep 17 00:00:00 2001 From: Simon Lauger Date: Mon, 17 Aug 2026 20:39:54 +0200 Subject: [PATCH 08/10] chore(renovate): mark release-relevant deps as fix commits Set semanticCommitType to fix for container base images, Go dependencies and OpenVox versions so that security-relevant updates trigger a semantic-release patch instead of being silently committed as chore. CI tooling and GitHub Actions stay chore (no release). --- renovate.json | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/renovate.json b/renovate.json index cbcec5b1..80992df2 100644 --- a/renovate.json +++ b/renovate.json @@ -66,7 +66,8 @@ "matchManagers": [ "gomod" ], - "groupName": "Go dependencies" + "groupName": "Go dependencies", + "semanticCommitType": "fix" }, { "matchManagers": [ @@ -78,7 +79,8 @@ "matchManagers": [ "dockerfile" ], - "groupName": "Container base images" + "groupName": "Container base images", + "semanticCommitType": "fix" }, { "matchManagers": [ @@ -92,7 +94,8 @@ ], "matchCurrentValue": "/^8\\./", "allowedVersions": "<9.0.0", - "groupName": "OpenVox 8 versions" + "groupName": "OpenVox 8 versions", + "semanticCommitType": "fix" }, { "matchManagers": [ @@ -107,7 +110,8 @@ "matchCurrentValue": "/^9\\./", "allowedVersions": ">=9.0.0", "ignoreUnstable": false, - "groupName": "OpenVox 9 versions" + "groupName": "OpenVox 9 versions", + "semanticCommitType": "fix" }, { "matchManagers": [ From d5d2c3be9a9d7b60638f099fee35599801df02ed Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 18 Aug 2026 01:15:39 +0000 Subject: [PATCH 09/10] fix(deps): update container base images (#534) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- images/openvox-agent/Containerfile | 2 +- images/openvox-db/Containerfile | 2 +- images/openvox-e2e-code/Containerfile | 2 +- images/openvox-mock/Containerfile | 2 +- images/openvox-operator/Containerfile | 2 +- images/openvox-server-reference/Containerfile | 2 +- images/openvox-server/Containerfile | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/images/openvox-agent/Containerfile b/images/openvox-agent/Containerfile index c09e3f37..382438e7 100644 --- a/images/openvox-agent/Containerfile +++ b/images/openvox-agent/Containerfile @@ -13,7 +13,7 @@ ARG OPENVOX_AGENT_VERSION=8.28.1 # OPENVOX_MAJOR selects the release repo (openvox${OPENVOX_MAJOR}-release-el-9). ARG OPENVOX_MAJOR=8 -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871 ARG OPENVOX_AGENT_VERSION ARG OPENVOX_MAJOR diff --git a/images/openvox-db/Containerfile b/images/openvox-db/Containerfile index f6a13a22..e6a9c0a2 100644 --- a/images/openvox-db/Containerfile +++ b/images/openvox-db/Containerfile @@ -16,7 +16,7 @@ ARG OPENVOXDB_VERSION=8.15.0 ################################################################################ # Stage: base — JRE + minimal runtime deps ################################################################################ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 AS base +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871 AS base ARG JDK_VERSION=21 diff --git a/images/openvox-e2e-code/Containerfile b/images/openvox-e2e-code/Containerfile index d38e6345..df32624a 100644 --- a/images/openvox-e2e-code/Containerfile +++ b/images/openvox-e2e-code/Containerfile @@ -8,7 +8,7 @@ # podman build -t openvox-e2e-code:latest -f images/openvox-e2e-code/Containerfile . # Stage 1: Install modules with r10k -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 AS builder +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871 AS builder RUN dnf module enable ruby:3.3 -y \ && dnf install -y --setopt=install_weak_deps=False ruby ruby-devel rubygem-bundler git gcc make redhat-rpm-config libffi-devel \ diff --git a/images/openvox-mock/Containerfile b/images/openvox-mock/Containerfile index a63b178f..324aa600 100644 --- a/images/openvox-mock/Containerfile +++ b/images/openvox-mock/Containerfile @@ -11,7 +11,7 @@ RUN go mod download COPY cmd/mock/ cmd/mock/ RUN CGO_ENABLED=0 go build -o /openvox-mock ./cmd/mock/ -FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786927599 +FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786987521 LABEL org.opencontainers.image.title="OpenVox Mock" \ org.opencontainers.image.description="Mock ENC/Report/OpenVox DB receiver for E2E tests" \ diff --git a/images/openvox-operator/Containerfile b/images/openvox-operator/Containerfile index 861491f2..a812ba8b 100644 --- a/images/openvox-operator/Containerfile +++ b/images/openvox-operator/Containerfile @@ -9,7 +9,7 @@ COPY internal/ internal/ ARG TARGETARCH RUN CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} go build -a -o manager ./cmd/main.go -FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786927599 +FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786987521 LABEL org.opencontainers.image.title="OpenVox Operator" \ org.opencontainers.image.description="OpenVox Operator for Kubernetes/OpenShift" \ diff --git a/images/openvox-server-reference/Containerfile b/images/openvox-server-reference/Containerfile index 5c6a4b4c..8321bce5 100644 --- a/images/openvox-server-reference/Containerfile +++ b/images/openvox-server-reference/Containerfile @@ -4,7 +4,7 @@ # Build: # podman build -t openvox-server-reference:latest images/openvox-server-reference/ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871 RUN rpm -Uvh https://yum.voxpupuli.org/openvox8-release-el-9.noarch.rpm \ && dnf install -y --setopt=install_weak_deps=False openvox-server \ diff --git a/images/openvox-server/Containerfile b/images/openvox-server/Containerfile index 5a807c20..b59c5688 100644 --- a/images/openvox-server/Containerfile +++ b/images/openvox-server/Containerfile @@ -17,7 +17,7 @@ ARG OPENVOX_VERSION=8.28.1 ################################################################################ # Stage: base — JRE + minimal runtime deps (no Ruby) ################################################################################ -FROM registry.access.redhat.com/ubi9/ubi:9.8-1786957459 AS base +FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871 AS base ARG JDK_VERSION=21 From a8a8756efdec5f539869a2779db815bea061b6c6 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 19 Aug 2026 08:09:47 +0000 Subject: [PATCH 10/10] chore(deps): update dependency conforma/cli to v0.9.112 (#535) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/_conforma-validate.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/_conforma-validate.yaml b/.github/workflows/_conforma-validate.yaml index 60b38b5b..da91248d 100644 --- a/.github/workflows/_conforma-validate.yaml +++ b/.github/workflows/_conforma-validate.yaml @@ -27,7 +27,7 @@ jobs: packages: read env: # renovate: datasource=github-releases depName=conforma/cli - EC_VERSION: "0.9.108" + EC_VERSION: "0.9.112" steps: - name: Checkout uses: actions/checkout@v7